diff --git a/mirrord-operator/templates/deployment.yaml b/mirrord-operator/templates/deployment.yaml
index 12f0f6e..dfb0702 100644
--- a/mirrord-operator/templates/deployment.yaml
+++ b/mirrord-operator/templates/deployment.yaml
@@ -59,7 +59,7 @@ spec:
         - name: OPERATOR_LICENSE_PATH
           value: /license/license.pem
         {{- else if .Values.license.key }}
-        {{- if .Values.agentTls }}
+        {{- if .Values.agent.tls }}
         - name: OPERATOR_AGENT_CONNECTION_TLS
           value: "true"
         {{- end }}
diff --git a/mirrord-operator/values.yaml b/mirrord-operator/values.yaml
index c867726..296ae57 100644
--- a/mirrord-operator/values.yaml
+++ b/mirrord-operator/values.yaml
@@ -50,9 +50,13 @@ agent:
     # registry: "ghcr.io/metalbear-co/mirrord"
     # tag: "latest"
 
+
+  # If you want the operator to secure agent connections with TLS, set this value to true.
+  # This option requires agent version at least 3.97.0.
+  tls: false
   ## use this if you want to add settings that aren't covered by the values.yaml
   ## see possible settings here: https://mirrord.dev/docs/reference/configuration/#root-agent
- extraConfig:
+  extraConfig:
   #   tolerations:
   #     - operator: Exists
   #   privileged: true
@@ -95,7 +99,3 @@ tls:
 
 # if you run on OpenShift, set this value to true to get a SCC in the yaml.
 openshift: false
-
-# If you want the operator to secure agent connections with TLS, set this value to true.
-# This option requires agent version at least 3.97.0.
-agentTls: false